Workshop: Encrypting hard disks with DM-Crypt and LUKS

THE WHOLE DISK

Encrypting a home directory is easy. Encrypting your whole hard disk – including the root filesystem – takes a little more effort.

Encrypting individual filesystems is no big deal; in fact, some distributions allow you to encrypt directories as part of the installation routine. But encrypting the home directory on your laptop is a job half done. Dishonest finders can still draw conclusions from log and configuration files. If you’re serious about providing security through encryption, you need to protect the whole hard disk against spying – something that no distribution can do out of the box. Things start to become more complex if you need to protect the root filesystem. Neither Suse nor Debian Linux give users a tool to help encrypt the root filesystem during the install (or later). That means you’ll need to roll up your shirt sleeves for some hands-on configuration

Buy this article as PDF

Express-Checkout as PDF

Price $2.95(incl. VAT)

Buy Linux Magazine

Related content

Modern installers offer the option of encryption with just a few clicks, but you might want to take control of the process. We show how to encrypt your partitions safely without sacrificing convenience.

The recent revelations about NSA spying have sparked renewed interest in data encryption. Encrypting at the file level is quick and easy, but if you're looking for an extra dose of protection, try encrypting the whole block device.